Instead of a fixed machine list, an Azure Update Manager maintenance configuration can select machines by tag, OS, region or resource group, worked out each time it runs.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Dynamic scope in context, with comparison tables and the common traps.
Terms in this definition
- List
Permission on Key Vault secrets allowing a caller to enumerate those in a vault, though their values are not returned.
- Azure Update Manager
Azure's patching service: it assesses which OS updates Azure VMs and Arc-enabled servers are missing and installs them, whether right away or within scheduled maintenance windows.
- Maintenance configuration
Holds a schedule plus update options as an Azure resource. Azure Update Manager relies on these, with the InGuestPatch (Guest) scope, to patch Azure VMs and Arc-enabled servers on a timetable.
- SELECT
A DML command in SQL used to retrieve rows from one table or several.
- Tag
Key-value label on compute (for cost tracking) or on a Unity Catalog securable or column, applied with
SET TAGorSET TAGSand requiringAPPLY TAG. Governed tags restrict allowed keys, values and assigners across the account. - region
A provider-defined grouping in VCF Automation of Supervisors that all share one NSX Local Manager; tenants consume its compute, storage and memory via quotas set per region.
- Resource group
Container for Azure resources. Its location holds only metadata and cannot be changed afterwards, and one resource group cannot sit inside another.
- Agents (classic) API
First-generation Foundry Agent Service API, based on threads, messages and runs. It is deprecated, replaced by conversations and responses, and retires on 31 March 2027.